Date limite de rançon de ShinyHunters pour 9 000 écoles américaines
Read, Watch or Listen
United States – The U.S. education sector faces a large-scale data extortion threat after the criminal hacking group ShinyHunters claimed to have stolen 3.6 terabytes of data from Instructure’s Canvas learning management system and set a final ransom deadline of May 12, 2026. The group says the breach affects roughly 275 million users across nearly 9,000 U.S. school systems, spanning universities and K-12 districts, and involves names, email addresses, student ID numbers and several billion private messages. The incident was first detected on May 7, 2026, and prompted a temporary shutdown of the Canvas platform as Instructure investigated the intrusion and worked to restore services. United States – Instructure reported that many universities and school districts found a ransom note posted on their Canvas homepages, as the hackers demanded an undisclosed settlement and threatened to publish the full database if the company does not pay by the May 12 deadline. The company’s investigation determined that the attackers exploited a vulnerability in Canvas’s Free-For-Teacher accounts, which allowed users to create accounts without institutional verification and use them to traverse trust boundaries into institutional tenants. Canvas services were restored by May 8, but the outage disrupted exam schedules and assignment deadlines nationwide, and Instructure has temporarily disabled the Free-For-Teacher feature as a security measure while the response continues.
Prepared by Emily Rhodes and reviewed by editorial team.
Timeline of Events
- 7 mai 2026 Détection d'une faille sur la plateforme Canvas
- 7 mai 2026 Apparition de notes de rançon sur les pages d'accueil
- 7 mai 2026 Instructure lance une enquête sur l'incident
- 8 mai 2026 Fonctionnalité de la plateforme Canvas largement rétablie
- 8 mai 2026 Comptes Free-For-Teacher temporairement désactivés
- Mai 2026 ShinyHunters revendique le vol de 3,6 To de données
- 12 mai 2026 Date limite fixée pour le paiement de la rançon
- Mai 2026 Examens nationaux et devoirs perturbés
Why This Matters to You
Si vous ou votre famille utilisez Canvas pour l'éducation, vos données personnelles pourraient être compromises. Cela inclut les noms, les adresses e-mail, les identifiants étudiants et les messages privés. C'est le bon moment pour revoir les paramètres de sécurité de votre compte et changer vos mots de passe.
The Bottom Line
Cette violation massive de données perturbe l'éducation aux États-Unis, des examens aux devoirs. Bien que Canvas ait pris des mesures pour sécuriser la plateforme, la menace subsiste jusqu'à l'échéance de la rançon. Vaut la peine d'être transmis si vous connaissez quelqu'un dans le secteur de l'éducation.
- Articles Published:
- 1
- Right Leaning:
- 0
- Left Leaning:
- 0
- Neutral:
- 1
- Distribution:
- Left 0%, Center 100%, Right 0%
Non spécifié dans la source.
Non spécifié dans la source.
Coverage of Story:
From Left
No left-leaning sources found for this story.
From Right
No right-leaning sources found for this story.
Comments